Have fun and support our military service members! Sonatype is hosting an exciting trivia competition to bring together members of the government DevSecOps community! This event is FREE to attend but pre-registration is required in order to gain access to: Live virtual networking event Find out who will be the champion, test your trivia skills Support a great cause! Are you interested in joining or creating a team? Contact adowney@sonatype.com...

Today, agencies are striving to improve their application security programs, while at the same time, not slowing down the development, delivery, and deployment of their software applications. Can a balance be achieved between security and an organization’s (or agency’s) daily business requirements? We know it’s possible. Application Security (AppSec) Awareness Programs that are specifically focused on the development communit...

The recent shift towards DevOps makes it clear that Federal agencies are moving forward with adopting this operational model to facilitate the practice of automating development, delivery, and deployment of mission-critical software. While the traditional idea of a software release dissolves into a continuous cycle of service and delivery improvements, agencies find that their conventional approaches to software security are having a difficult...

The recent shift towards DevOps makes it clear that Federal agencies are moving forward with adopting this operational model to facilitate the practice of automating development, delivery, and deployment of mission-critical software. While the traditional idea of a software release dissolves into a continuous cycle of service and delivery improvements, agencies find that their conventional approaches to software security are having a difficult...

Today, agencies are striving to improve their application security programs, while at the same time, not slowing down the development, delivery, and deployment of their software applications. Can a balance be achieved between security and an organization’s (or agency’s) daily business requirements? We know it’s possible. Application Security (AppSec) Awareness Programs that are specifically focused on the development communit...

With the increases in data volumes, explosion in number of devices and sophistication of attackers, current cybersecurity tools are challenged processing the millions of events and providing insights fast enough. Hortonworks Cybersecurity Platform (HCP) is a modern data application based on Apache Metron, powered by Apache Hadoop, Apache Storm, and related technologies that takes a data-science-based approach to cybersecurity with behavior pro...

The Federal Source Code Policy is a mandate designed to support reuse and public access to government developed source code. The policy requires new source code developed specifically by or for the Federal Government to be made available to share and reuse across all government agencies. The policy also includes an Open Source Pilot Program that requires agencies to release at least 20% of their new custom-developed source code to the public....

Government organizations that really understand Agile and DevOps are implementing a new approach to enable teams to seamlessly communicate activity and actions taken in IT environments. While this may seem too futuristic to be easily attainable in a Government IT organization, the combination of GitHub Enterprise and Ansible Tower will enable your organization to realize many benefits as you build your capabilities toward the fully-enabled Dev...

Learn about the dynamic management solution behind two of our leading partners, Red Hat and NetApp: Scale and integrate both Linux® and Microsoft Windows workloads Take advantage of the performance benefits, competitive pricing, and trusted, stable environment that you expect from Red Hat New type of consumption based model for customer projects via STaaS (Storage as a Service) Find success under sequestration Discover a datacenter provis...